$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146517.roa File: AS146517.roa (raw, json) Hash identifier: d67kDG8rfspFSgmWCG84eWIavue4CcmZuXje83tTufo= Subject key identifier: 93:36:F9:AF:4A:2C:54:5D:93:91:43:01:40:C1:A4:8C:68:E0:D8:FF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 79E56CA27532856432D4514E59B4FAB6DCD21304 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146517.roa Signing time: Wed 04 Mar 2026 06:33:54 +0000 ROA not before: Wed 04 Mar 2026 06:28:54 +0000 ROA not after: Wed 03 Mar 2027 06:33:54 +0000 asID: 146517 IP address blocks: 240a:af1b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e5:6c:a2:75:32:85:64:32:d4:51:4e:59:b4:fa:b6:dc:d2:13:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:28:54 2026 GMT Not After : Mar 3 06:33:54 2027 GMT Subject: CN=9336F9AF4A2C545D9391430140C1A48C68E0D8FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:aa:86:dd:1f:05:c7:45:6d:29:67:57:03: 09:91:c6:8a:39:ed:65:3b:c6:30:d8:c1:2d:3d:c0: fe:d5:41:f7:d5:29:fe:0c:cd:a6:61:06:f6:9e:30: 79:de:61:13:51:8c:9c:f3:2c:0a:f6:81:0a:9d:4d: 52:07:5d:97:5a:92:33:e6:0d:aa:2e:ca:58:9b:89: 77:7a:90:f3:4e:b8:f8:27:ed:75:08:5c:e4:9b:47: b1:ef:d6:d5:e4:18:e2:59:4b:6d:25:39:9c:dd:8c: 6e:b6:78:e2:4c:0d:bb:61:c7:79:90:aa:1d:f7:73: 10:b6:53:55:8b:b2:ea:31:f0:8e:73:0d:53:51:79: ce:ec:4a:f6:4e:eb:32:3e:15:c4:03:1a:13:28:a3: c8:f2:4c:d7:d1:a2:cd:1f:f9:0e:27:b8:51:8f:83: ef:c6:6b:49:b5:d3:d6:41:06:c2:8a:2d:1a:cf:e2: f1:93:0d:c0:67:0d:83:97:74:7c:65:a1:95:5c:c0: 35:60:70:67:6e:bf:6a:3b:a9:ec:38:54:76:3c:36: 69:58:01:e2:14:b4:4d:54:96:5f:47:84:36:1b:0e: 0f:e1:fe:c4:a0:53:f8:91:61:ff:d9:79:d7:87:94: 06:85:46:af:a8:20:22:fd:a2:e4:8b:55:af:a8:8a: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:36:F9:AF:4A:2C:54:5D:93:91:43:01:40:C1:A4:8C:68:E0:D8:FF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af1b::/32 Signature Algorithm: sha256WithRSAEncryption 1c:cf:f5:cd:1c:1f:02:41:74:73:56:d7:84:c0:15:0a:e3:02: 14:a2:fa:fb:c9:4a:3b:b5:fb:74:50:62:d5:8a:bf:93:8e:be: e5:f7:45:a4:d0:94:09:f0:86:a4:f7:81:7e:49:73:7e:66:be: 4a:3a:86:22:9e:4f:a2:d0:7e:84:c7:b7:0f:95:42:73:9f:79: 38:31:67:7c:6c:62:0d:82:ce:0a:3f:24:41:c5:c5:b1:95:e9: e4:8c:87:be:e7:61:5e:ba:50:da:66:25:ed:be:27:2f:71:a1: 93:61:c0:5a:32:c9:14:fe:4e:da:5f:fc:5d:49:77:51:f9:55: 6e:43:e6:02:68:da:a3:ce:86:e8:9c:1a:e7:43:0e:cb:1a:a3: c2:b1:41:38:a4:83:d4:ad:f9:dd:15:55:1e:38:65:8c:2a:d3: 35:a4:ca:27:b6:5b:95:21:d7:76:86:21:6c:e5:dc:8d:c0:52: 28:5c:e4:4b:d0:23:56:6c:f3:ee:6d:0b:39:ae:54:c8:d6:77: ee:ac:53:4f:ea:3d:75:36:ac:a8:41:c5:83:e7:8a:2b:85:f9: 22:0b:45:2e:3c:8f:78:be:ad:c1:18:80:70:64:3c:fd:d8:01: 2f:a7:81:54:f5:eb:27:40:7d:e2:40:e0:09:d8:80:40:04:05: f2:f8:09:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeeVsonUyhWQy1FFOWbT6ttzSEwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjg1NFoX DTI3MDMwMzA2MzM1NFowMzExMC8GA1UEAxMoOTMzNkY5QUY0QTJDNTQ1RDkzOTE0 MzAxNDBDMUE0OEM2OEUwRDhGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALauqobdHwXHRW0pZ1cDCZHGijntZTvGMNjBLT3A/tVB99Up/gzNpmEG9p4w ed5hE1GMnPMsCvaBCp1NUgddl1qSM+YNqi7KWJuJd3qQ8064+CftdQhc5JtHse/W 1eQY4llLbSU5nN2MbrZ44kwNu2HHeZCqHfdzELZTVYuy6jHwjnMNU1F5zuxK9k7r Mj4VxAMaEyijyPJM19GizR/5Die4UY+D78ZrSbXT1kEGwootGs/i8ZMNwGcNg5d0 fGWhlVzANWBwZ26/ajup7DhUdjw2aVgB4hS0TVSWX0eENhsOD+H+xKBT+JFh/9l5 14eUBoVGr6ggIv2i5ItVr6iKjA8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSTNvmv SixUXZORQwFAwaSMaODY/zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjUxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rxswDQYJKoZIhvcNAQELBQADggEBABzP9c0cHwJBdHNW14TAFQrjAhSi+vvJSju1 +3RQYtWKv5OOvuX3RaTQlAnwhqT3gX5Jc35mvko6hiKeT6LQfoTHtw+VQnOfeTgx Z3xsYg2Czgo/JEHFxbGV6eSMh77nYV66UNpmJe2+Jy9xoZNhwFoyyRT+Ttpf/F1J d1H5VW5D5gJo2qPOhuicGudDDssao8KxQTikg9St+d0VVR44ZYwq0zWkyie2W5Uh 13aGIWzl3I3AUihc5EvQI1Zs8+5tCzmuVMjWd+6sU0/qPXU2rKhBxYPniiuF+SIL RS48j3i+rcEYgHBkPP3YAS+ngVT16ydAfeJA4AnYgEAEBfL4CcA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:10 2026 by rpki-client